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MANAGEMENT SHUTDOWN AND RESET 
OF EMBEDDED SYSTEMS 

NOTICE REGARDING COPYRIGHT 

5 

This application contains a microfiche appendix which 
contain one microfiche having 13 frames. 

A portion of the disclosure of this patent document 
contains material which is subject to copyright protection. 
The . copyright owner has no objection to the facsimile 1Q 
reproduction by anyone of the patent disclosure, as it 
appears in the Patent and Trademark Office patent files or 
records, but otherwise reserves all copyright rights whatso- 
ever 
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A Field of the "Invention 

This invention relates to the field of computer systems and 
more particularly to the shutdown and reset of embedded 
systems. 

B. Description of Related Art and Advantages of the 
Invention 

Embedded computer systems typically operate in real- 
time or multi-tasking environments for specific applications. ^ 
Such systems typically include a processor, RAM, ROM and 
an interface to hardware devices required by the application. 
A disk drive is not normally needed because the processor in 
embedded systems does not normally perform general pur- 
pose file-based applications. When embedded systems are x 
shutdown, the status of the machine may be saved by storing 
certain variables in non-volatile RAM, or the status may be 
gracefully set to a power down state from which the system 
may be gracefully powered -up. 

Real-time or multi-tasking operating systems are avail- 35 
able with the capability of performing in a general purpose 
computing environment. However, the startup, shutdown 
and reset of such systems is typically performed from a 
terminal through user action from a keyboard or a mouse. A 
shutdown or reset that resembles a power off condition, for ^ 
example, from a reset switch, may not be performed in such 
general purpose environments without corrupting system 
files. The shutdown from a reset switch does not provide the 
operating system with the opportunity to perform disk 
synchronization or to close and save temporary files that 45 
_ may be open. 

Embedded systems having a general purpose computing 
environment arc finding increasing use and expanding fea- 
tures. For example, communications access devices are 
typically embedded systems. Whereas communication 50 
access devices have been designed to perform a limited role 
in terms of call processing and routing, with the ultimate 
destination for the calls being one or more host computers on 
the local area network, communications servers provide the 
network access functions of an integrated communications 55 
router in addition to a general purpose computing platform. 
The platform runs a commercially available stand alone or 
shareware operating system such as Windows® NT from 
Microsoft Corporation. The software that runs on the com- 
puting platform may perform, for example, network 60 
management, remote access, intranet web page, and other 
functions. 

A communication access device with the integral general 
purpose computing platform, as described herein, provides a 
substantial advancement in the features and capabilities of a 65 
communication access device. For example, in an embodi- 
ment in which the communication access device is con- 



nected to the network, improved remote access service may 
be achieved since the general purpose computing platform 
can route certain calls to the LAN while terminating other 
calls, such as those calls that require access to information 
that is stored locally in the memory in the general purpose 
computing platform. Additionally, the general purpose com- 
puting platform may provide enhanced network manage- 
ment service efficiently controlling the flow of calls between 
the access device and the network. The general purpose 
computing platform may also provide protocol proxy service 
and authentication services. 

Other embedded systems may find an increase in features 
and advantages when combined -with a general purpose 
computing environment. For many such embedded systems 
however, the need to shutdown the system from the key- 
board or mouse to avoid corrupting system files may be 
inconvenient. For example, an embedded system may have 
the keyboard and mouse separated from the hardware that 
carries out most of the embedded system and general 
purpose computing functions. It would be desirable if a 
shutdown and reset function were available without the need 
to use a keyboard or mouse. 

The present invention includes a push button for resetting 
an embedded system without the need for a keyboard or 
mouse. The present invention also includes a system for 
initiating a shutdown and reset of the system in response to 
predetermined shutdown/reset conditions. 

These and many other features and advantages of the 
invention will become more apparent from the following 
detailed description of preferred embodiments of the inven- 



tion. 



SUMMARY OF THE INVENTION 



An embedded system having a general purpose comput- 
ing environment uses a management shutdown system for 
shutting down the embedded system. An operating system is 
included for performing embedded system functions and 
general purpose computing functions. A shutdown manage- 
ment driver generates a management reset signal in response 
to at least one shutdown condition. A shutdown and reset 
manager senses the shutdown condition and initiates a 
shutdown of the operating system in response to the man- 
agement reset. The shutdown management driver generates 
a second management reset to reset the embedded system 
hardware and the shutdown and reset manager resets the 
hardware in response to the second management reset. 

In a further aspect of the present invention, a method is 
provided for shutting down an embedded system having a 
general purpose computing environment and an operating 
system. The method includes the step of generating a 
management reset in response to a shutdown condition. The 
management reset is received and the operating system is 
shutdown in response. The operating system shutdown 
includes the step of saving any open temporary files. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram of an embedded system in 
which the present invention finds particular use; 

FIG. 2 is a block diagram of the system in FIG. 1 in which 
the embedded system is used as a communications system; 

FIG. 3 is a block diagram of the general purpose computer 
sub-system in the system of FIG. 2; 

FIG. 4 is a block diagram of the shutdown and reset 
manager in FIG. 3; 

HO. 5 is a flowchart of a method of performing a 
shutdown and reset of- an embedded system and 
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FIG. 6 is a state diagram of the shutdown and reset 
manager of FIG. 5. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENT 



15 



FIG. 1 is a block diagram of an embedded system 10 in 
which the present invention finds particular use. The embed- 
ded system 10 includes an embedded application 20 and a 
general purpose computing engine 30. The general purpose 
computing engine 30 includes a monitor 12 and a keyboard 10 
14 to provide a user with an interface to general purpose 
applications. A plurality of output devices 8 and input 
devices 6 may be connected to the embedded system 10. The 
embedded system 10 also includes a reset button 32 and a 
status display 34. 

The embedded application 20 includes the hardware and 
software components for performing real-time functions. 
The embedded application 20 in FIG. 1 may perform any set 
of real-time functions such as functions for controlling 
equipment in instrumentation, manufacturing and commu- 
nications. The equipment is controlled by software compo- 
nents that function with one or more real-time operating 
systems. The embedded application may include circuitry 
that interfaces with general purpose computing engine 30. ^ 
The circuitry may take the form of one or more modules 
having computing elements and software controlled by local 
real-time operating systems. 

A real-time operating system, or an operating system with 
multi-tasking capabilities such as UNIX™ -based operating ^ 
system, Solaris 86™, Windows® NT™, Netware, etc., 
preferably runs in the general purpose computing engine 30 
to provide the capability of performing functions that are 
part of the embedded application 20. The general purpose 
computing engine 30 also preferably includes general user 35 
applications that operate from a hard disk such as word 
processors, Internet browsers, spreadsheets, etc. One prin- 
cipal feature of the present invention is that the reset button 
32 and a reset management system (described below with 
reference to FIGS. 3-*) in the general purpose computing ^ 
engine 30 perform shutdown and reset operations that permit 
the operating system to shutdown in an orderly fashion. The 
orderly shutdown allows such operations as disk synchro- 
nization and the saving of temporary files and avoids the 
destructive shutdown previously associated with disk-based 45 
embedded systems. 

One example of the embedded system 10 of FIG. 1 is a 
product for providing network communications control. 
FIG. 2 is a block diagram of such a product, which is known 
commercially as the Total Control Network Enterprise 50 
Hub™, and is commercially available from 3COM Corp., 
5400 Bayfront Plaza, Santa Clara, Calif., the assignee of the 
present invention. Persons of skill in the art are familiar with 
"this product or with analogous products available from other 
telecommunications companies, such as Ascend 55 
Communications, Inc., Livingston, Communications, and 
Multitech. 

. The Total Control Network Enterprise Hub™ includes a 
plurality of cards in a communications chassis, one of the 
cards being a gateway card 50 which in a preferred embodi- 50 
ment is a product known as the EdgeServer™ card. The 
gateway card 50 in FIG. 2 includes the general purpose 
computing engine 30 and a local area network interface 40. 

Other cards in the Total Control Network Enterprise 
Hub™ may include a T1/E1/PRI network interface card 65 
(NIC) 22, a T1/E1/PRI network application card (NAQ 23, 
one or more multiple modem network interface cards 24, 26 



and one or more multiple modem network application cards 
25, 27. The cards communicate with each other via a high 
speed internal chassis bus system 19. The T1/E1/PRI NIC 22 
communicates externally via the T1/E1/PRI interface 21. 
5 The multiple modem NIC's 24, 26 communicate with 
attached computers over RS232 cables 29. 

The chassis may optionally have a management card for 
managing the operation of the chassis. Such a management 
card may include the reset push button 32 and status display 
34 as well as hardware and software components for man- 
aging the operation of the chassis. The management card 
may include hardware and software components that man- 
age reset lines that are dedicated to individual cards. 

The telephone line interface and application cards 22, 23 
modem cards 24, 25, 26 27 and internal chassis bus 19, and 
computer network interface 40 of the gateway (or 
"EdgeServer Pro™") card 50 arc described in great detail in 
terms of their component circuitry and operation in two 
issued United Slates patents, assigned to U.S. Robotics 
Access Corp., which are fully incorporated by reference 
herein: U.S. Pat. No. 5,577,105 of Baum et al., entitled 
"Telephone Call Switching and Routing Techniques for Data 
Communications," and U.S. Pat. No. 5,528,595 of Walsh et 
al., entitled "Modem Input/Output Signal Processing Tech- 
niques". The detailed structure of a preferred internal chassis 
bus 19 is described in U.S. Pat. No. 5,416,776 to Panzarella 
et aL, entitled "Modem Backplane Techniques", also 
assigned to U.S. Robotics Access Corp., which is incorpo- 
rated by reference herein. The management of a chassis by 
a management card is also described in detail in U.S. Pat. 
No. 5,436,614 to Panzarella et al., entitled "Modem Man- 
agement Techniques," which is also assigned to U.S. Robot- 
ics Access Corp. and incorporated by reference herein. 

Descriptions of examples of the EdgeServer Pro™ and of 
the Total Control Network Enterprise Hub™ may also be 
found in U.S. patent application Sen No. 08/813,173 (titled 
"Communications Access Chassis with General Purpose 
Computing Platform" filed on Mar. 7, 1997) the contents of 
which are incorporated by reference herein. The cards that 
make up the chassis are also described in detail in the 
operators* manual that comes with the sale of the Total 
Control Network Enterprise Hub™, which is incorporated 
by reference herein. 

Since the details of the telephone line interface and 
application cards 22, 23 modem cards 24, 25, 26, 27, internal 
chassis bus 19, computer network interface 40 of the gate- 
way (or "EdgeServer Pro™") card 50 and the management 
cards (not shown) are already described elsewhere and 
persons skilled in the art already know how to build and 
design such circuits (or equivalent circuits), a detailed 
discussion, of these components is not necessary. 
Additionally, the details as to the architecture or design of 
the embedded system are not particularly important. The 
particular arrangement of components on individual cards or 
the division of functionality (e.g., telephone interface, 
modem signal conversions, etc.) among individual cards is 
not important. The novelty of the present invention is 
believed to be in gracefully shutting down and resetting the 
embedded system. Thus, while the inventors' best mode 
known for practicing the invention will be' set forth in the 
context of the particular system 10 of FIGS. 2-5, it will be 
appreciated that the inventors do not consider the invention 
limited to the particular system architecture or the particular 
embedded system application shown. 

FIG. 3 is a block diagram of the gateway card 50 in the 
embedded system of FIG. 2. The gateway card 50 has 
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incorporated thereon the hardware and software components 
comprising a general purpose computing platform. For 
example, the gateway card 50 includes a microprocessor 56. 
The gateway card 50 further includes a peripheral control 
interface and memory controller having one or more user 5 
interface ports for receiving cables connected to user inter- 
face devices, such as the video monitor 12, the mouse 15, 
and the keyboard 14, enabling a user to interface with the 
general purpose computer in the system. The gateway card 
50 further includes a hard disk memory 52 and a floppy disk 1Q 
drive 54 for storing and using commercially available soft- 
ware programs and databases and programs of interest to the 
remote users that may dial in to the system. The gateway 
card 50 may also include an external disk drive (not shown) 
enabling a user to download programs or data bases, or other 
information onto the hard disk, and a bus interface for 15 
connecting the general purpose computing platform to exter- 
nal memory storage devices on a bus such as a SCSI or 
SCSI-2 bus (not shown). 

The gateway card 50 further includes the local area 
network interface 40 to an industry standard network used to 20 
connect remote computers to the system over the local area 
network 28 such as an Ethernet or Token Ring network. The 
network access and interface circuitry in the gateway card 
50 performs certain protocol processing and placing the calls 
on a local or wide area network 28 that is connected to the 25 
system 10. 

The gateway card 50 includes different ways to shutdown 
and reset the embedded system without causing file system 
corruption. The gateway card 50 includes a denounce circuit 
36 and a shutdown and reset manager 60 for processing the 30 
shutdown and reset of the embedded system 10 without 
system corruption. The shutdown and reset of the embedded 
system 10 may be started when the user presses the reset 
button 32 or when a shutdown/reset condition is sensed. The 
reset button 32 is connected to the denounce circuit 36 which 35 
communicates a reset signal at 37 when the push button 
signal at 32a has reached a predetermined reset threshold 
level for a predetermined minimum threshold time. One 
preferred embodiment uses a MAX809 integrated circuit 
from MAXIM to implement the denounce circuit 36. 40 

The reset signal at 37 feeds into the shutdown and reset 
manager 60. When the reset signal 37 is asserted, the 
shutdown and reset manager 60 generates an interrupt signal 
on the INT input of the microprocessor 56. During the 
interrupt service routine started by the interrupt signal, the 45 
shutdown of the operating system is initiated. The shutdown 
and reset manager 60 inhibits any further hardware reset 
until the operating system has completed the shutdown 
process- When the shutdown process has completed, the 
shutdown and reset manager 60 waits for a second push of 50 
the reset button 32. When the user pushes the reset button 32 
a second lime, the shutdown and reset manager 60 outputs 
a reset pulse to the microprocessor 56, the peripheral and 
memory controller (PMC) 38 and to any other hardware 
device that must be reset including hardware devices on 55 
other cards. 

The embedded server may also be shutdown and reset at 
the gateway card 50 with user action using the keyboard and 
mouse to initiate shutdown at the operating system interface. 
An advantage of using the reset button 32 is that the 60 
keyboard and mouse may not be located where the chassis 
for the embedded system is located. If a user were to remove 
a card, or perform a maintenance function, the reset button 
32 eliminates the need to locate the keyboard and mouse for 
entry of the shutdown command. 65 

The shutdown and reset of the embedded system 10 may 
also be caused when a management reset line 71 is asserted. 



The management reset line is asserted by the shutdown 
management driver 62 which is a hardware or software 
component that controls a reset that permits a graceful 
shutdown of the operating system. Examples of functions 
that benefit from a graceful shutdown of the operating 
system include a system lockup, a watchdog timer timeout, 
or any system fault or other condition which may involve the 
shutdown of the system to permit user interaction. 

The assertion of the management reset line is one of 
several shutdown/reset conditions in a preferred embodi- 
ment. The shutdown/reset conditions are conditions that 
require that the embedded system 10 be shutdown or reset. 
The block diagram of the shutdown and reset manager 60 in 
FIG. 4 shows inputs for signals that indicate representative 
examples of shutdown/reset conditions in a preferred 
embodiment. Examples of such conditions include a system 
lockup, a timeout of a watchdog timer, an over temperature 
condition, an over voltage condition or the loss of a POWER 
GOOD signal from one or more modules. The system 
lockup and watchdog timer timeout conditions may be 
indicated by the management reset signal. 

The management reset 71, over temperature 73, over 
voltage 72 and loss of POWER GOOD signals 74, shown in 
FIG. 4, may be generated in different ways. For example, the 
signals may be generated by the shutdown management 
driver 62 (in FIG. 3). The shutdown management driver 62 
may be located on the management card described above 
with reference to FIG. 2. The management card may include 
a watchdog timer or hardware and software components for 
monitoring temperature in the chassis, voltage at the power 
source or other signal and power signals at other cards. The 
management reset 71, over temperature 73, over voltage 72 
and loss of POWER GOOD signals 74 may also be gener- 
ated according to particular functions. For example, one 
example of an over temperature signal may be generated by 
a circuit that monitors a temperature sensor located near the 
processor. When the temperature sensor detects that the 
temperature of the processor 56 may have reached destruc- 
tive levels, the circuit generates an over temperature signal 
shown in FIG. 4. 

When a shutdown/reset condition is received by the 
shutdown and reset manager 60, the shutdown and reset 
manager 60 will either generate the interrupt signal at the 
INT input of the microprocessor 56 or generate the hardware 
reset, depending on the condition received. Any of the 
conditions may generate the interrupt; however, conditions 
such as the over temperature or over voltage conditions may 
generate the hardware reset to prevent destruction of com- 
ponents in the system. 

The generation of the interrupt will cause the operating 
system to perform an orderly shutdown. The shutdown and 
reset manager 60 inhibits any hardware reset until the 
operating system has completed the shutdown. Once the 
shutdown of the operating system is complete, the hardware 
may be reset by either the pressing of the reset button 32 by 
the user or by the release and re-assertion of the management 
reset signal 71. The hardware reset using the reset button 32 
may be used if the shutdown was caused by a fault condition 
such as the over temperature, over voltage or system lockup 
conditions. Once the system is shutdown, the user would 
perform any necessary maintenance and press the reset 
button when complete. The release and re -assertion of the 
management reset signal may be performed by the shutdown 
management driver 62 (in FIG. 3) according to hardware and 
software that may sense corrected conditions. 

In a preferred embodiment, the shutdown and reset man- 
ager 60 is an ALTERA™ 7128 PUD, which is a program- 
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mable logic device that may be programmed to perform the 
functions of the shutdown and reset manager 60 as described 
above. For example, the PLD may be programmed to 
implement a state machine such as the one described below 
with reference to FIG. 6. The stale machine in FIG. 6 may 5 
be implemented using the software in the Microfiche Appen- 
dix. The software in the Microfiche Appendix has been 
written in VHDL, a hardware description language that is 
known to those of skill in the art. The reader is directed to 
the notice regarding copyright set forth above. io 

In alternative embodiments, the shutdown and reset man- 
ager 60 may be implemented using software that may be 
invoked using interrupts, polling or other suitable tech- 
niques. 

FIG. 5 is a flowchart of a method for shutting down and 15 
resetting the embedded system. One of ordinary skill in the 
art will appreciate that the flowchart in FIG. 5 may be carried 
out using a variety of different hardware and software 
configurations. One such configuration includes the shut- 
down and reset manager described above with reference to 
FIGS. 3 and 4. 

The method begins at step si or si' in FIG. 5 with a 
shutdown and reset action. At step si, the shutdown and 
reset action is the press of the reset button 32 by the user. The ^ 
occurrence of either step si or si' will cause the operating 
system to begin to shutdown as shown at step s2. The 
shutdown of the operating system includes a disk synchro- 
nization process in which any open temporary files may be 
saved and the status of the system stored for use when the ^ 
system is restarted. The initiation of the shutdown of the 
system may be indicated on the status display 34 as shown 
at step s3. 

Once the operating system has completed the shutdown 
operation, the shutdown and reset manager waits for a 35 
hardware reset signal at decision block dl. The shutdown 
management driver may receive the hardware reset signal as 
a second push of the reset button 32 (in FIG. 1), or by a 
trigger through the reset line. When the hardware reset 
signal is received, the shutdown and reset manager performs ^ 
all hardware reset functions. 

The state machine in FIG. 6 illustrates one embodiment of 
the flowchart in FIG. 5. Step si is represented in the state 
machine of FIG. 6 by the transition from 'NORMAL 
OPERATION' to 'SHUTTING DOWN DUE TO PUSH 45 
BUTTON/ 

At step si', the shutdown and reset action is triggered 
upon sensing the occurrence of a shutdown condition. Step 
si is represented in the state machine of FIG. 6 by the 
transition from 'NORMAL OPERATION' to 'SHUTTING so 
DOWN DUE TO MANAGEMENT/ 

According to the state machine in FIG. 6, the shutdown 
condition that causes this transition is the shutdown condi- 
tion received from the shutdown management driver 62 (in 
FIG. 3). The over temperature and power condition signals 55 
cause a transition to the 'HARDWARE RESET' state. If the 
shutdown condition from the shutdown management driver 
62 is received while in the 'SHUTTING DOWN DUE TO 
PUSH BUTTON* state, or if the push button reset is received 
while in the 'SHUTTING DOWN DUE TO MANAGE- 60 
MENT' state, the 'SHUTTING DOWN DUE TO MGMT & 
PUSH BUTTON* state is entered. During the'SHUTTING 
DOWN DUE TO MANAGEMENT*, SHUTTING DOWN 
DUE TO PUSH BUTTON' and 'SHUTTING DOWN DUE 
TO MGMT & PUSH BUTTON' states, the operating system 65 
(in FIG. 6, WINDOWS NT™ Is assumed) performs its 
shutdown. 



When the operating system has completed its shutdown, 
the 'SHUTDOWN COMPLETE' state is entered. If the push 
button reset is pressed, or if the management reset is 
generated before the operating system has completed its 
shutdown, then the 'HARDWARE RESET' state is entered. 
Ordinarily, the user waits for the 'SHUTDOWN COM- 
PLETE' state to press the reset push button. When the push 
button reset is pressed, or when the management reset is 
received while in the 'SHUTDOWN COMPLETE' state, the 
'HARDWARE RESET' state is entered. 

While the invention has been described in conjunction 
with presently preferred embodiments of the invention, 
persons of skill in the art will appreciate that variations may 
be made without departure from the scope and spirit of the 
invention. For example, variations may be made, or exist in 
the types of conditions that may be monitored for shutdown/ 
reset, the manner of implementing the shutdown and reset 
manager, the manner of implementing the shutdown man- 
agement driver, and the type of embedded system applica- 
tion used. This true scope and spirit is defined by the 
appended claims, interpreted in light of the foregoing. 
We claim: 

1. A system for shutting down an embedded system 
having a general purpose computing platform comprising: 
a storage system, the general purpose computing platform 
being operable to execute a plurality of general purpose 
applications stored in the storage system, said general 
purpose applications being operable to provide a user 
with computing functions during execution; 
an operating system operable to provide resources for an 
embedded application and general purpose computing, 
the embedded application operable to create and main- 
tain a plurality of temporary data files, the storage 
system being operable to store the plurality of tempo- 
rary data files and to close the temporary data files 
during an orderly shutdown of the operating system; 
the embedded application operable to perform selected 
real-time functions using the temporary data files, the 
embedded application comprising hardware and soft- 
ware components for monitoring at least one shutdown 
condition and a shutdown management driver operable 
to generate a management reset in response to at least 
one shutdown condition; and 
a shutdown and reset manager for sensing said manage- 
ment reset, said shutdown and reset manager being 
operable to initiate the orderly shutdown of the oper- 
ating system in response to the reset signal and to 
complete the orderly shutdown when the storage sys- 
tem has closed the temporary data files, thereby pre- 
venting the destruction of the temporary data files. 

2. The system of claim 1 wherein said shutdown man- 
agement driver further generates a second management 
reset; and 

said shutdown and reset manager generates a hardware 
reset in response to the second management reset. 

3. The system of claim 1 further comprising: 
a display device for displaying a shutdown status mes- 
sage. 

4. An embedded system comprising: 
a general purpose computing platform comprising a pro- 
cessor and a storage system, the general purpose com- 
puting platform being operable to execute a plurality of 
general purpose applications stored in the storage 
system, said general purpose applications being oper- 
able to provide a user with computing functions during 
execution; 
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an operating system executing in the general purpose 
computing platform, the operating system operable to 
provide computing resources to the general-purpose 
applications, the storage system being operable to store 
a plurality of temporary data files and to close the 
temporary data files during an orderly shutdown of the 
operating system; 

an embedded application to perform selected real-time 
functions, the embedded application operable to create 
and maintain the plurality of temporary data files the 
embedded application comprising hardware and soft- 
ware components for monitoring at least one shutdown 
condition and a shutdown management driver operable 
to generate at least one reset signal in response to the 
shutdown condition; and 

a shutdown and reset manager in the general purpose 
computing platform, the shutdown and reset manager 
operable to receive the reset signal and to initiate the 
orderly shutdown of the operating system in response 
to the reset signal and to complete the orderly shutdown 
when the storage system has closed the temporary data 
files. 

5. The embedded system of claim 4 wherein: 

the embedded application comprises a plurality of cards 
connected to the general purpose computing platform 
by a bus system; and 

wherein each said card includes the hardware and soft- 
ware components for monitoring the at least one shut- 
down condition. 

6. The embedded system of claim 5 wherein: 

the embedded application further comprises a manage- 
ment card having the shutdown and reset management 
driver, the management card connected to the plurality 
of cards by the bus system to receive the at least one 
shutdown condition and to input the at least one shut- 
down condition to the shutdown and reset management 
driver. 

7. The embedded system of claim 6 wherein the at least 
one shutdown condition monitored by the hardware and 
software components on the plurality of cards includes an 
over temperature condition on a selected one of the plurality 
of cards. 

8. The embedded system of claim 7 wherein the shutdown 
and reset manager is operable to generate a hardware reset 
when the shutdown management driver generates the reset 
signal in response to the over temperature condition, said 
hardware reset being operable to re-initialize the embedded 
system. 

9. The embedded system of claim 6 wherein the at least 
one shutdown condition monitored by the hardware and 
software components on the plurality of cards includes an 
over voltage condition on a selected one of the plurality of 
cards. 

10. The embedded system of claim 9 wherein the shut- 
down and reset manager is operable to generate a hardware 
reset when the shutdown management driver generates the 
reset signal in response to the over voltage condition, said 
hardware reset being operable to re-initialize the embedded 
system. 

11. The embedded system of claim 6 wherein the at least 
one shutdown condition monitored by the hardware and 
software components on the plurality of cards includes a loss 
of power good condition on a selected one of the plurality of 
cards. 

12. The embedded system of claim 11 wherein the shut- 
down management driver generates a second management 
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reset signal when a power good condition is sensed by the 
shutdown management driver. 

13. The embedded system of claim 6 wherein the at least 
one shutdown condition monitored by the hardware and 

5 software components on the plurality of cards includes a 
system lockup condition on a selected one of the plurality of 
cards. 

14. The embedded system of claim 13 wherein the shut- 
down and reset manager is operable to generate a hardware 
reset when the shutdown management driver generates the 

10 reset signal in response to the system lockup condition, said 
hardware reset being operable to re -initialize the embedded 
system. 

15. The embedded system of claim 6 wherein the hard- 
ware and software components includes a watchdog timer 

15 and the at least one shutdown condition monitored by tbe 
watchdog timer on the plurality of cards includes a watch 
dog timer timeout. 

16. The embedded system of claim 6 further comprising 
a chassis to support the plurality of cards of the embedded 

20 application wherein the management card further comprises 
hardware and software components for monitoring at least 
one shutdown condition for the chassis. 

17. The embedded system of claim 16 wherein the at least 
one shutdown condition for the chassis includes an over 

25 temperature condition in the chassis. 

18. The embedded system of claim 17 wherein the shut- 
down and reset manager is operable to generate a hardware 
reset when the shutdown management driver generates the 
reset signal in response to the over temperature condition, 

30 said hardware reset being operable to re-initialize the 
embedded system. 

19. The embedded system of claim 17 wherein the at least 
one shutdown condition for the chassis includes an over 
voltage condition in the chassis. 

35 20. The embedded system of claim 19 wherein the shut- 
down and reset manager is operable to generate a hardware 
reset when the shutdown management driver generates the 
reset signal in response to the over voltage condition, said 
hardware reset being operable to re-initialize the embedded 

40 system. 

21. The embedded system of claim 12 wherein the hard- 
ware and software components includes a chassis watchdog 
timer and the at least one shutdown condition monitored by 
the chassis watchdog timer on the plurality of cards includes 

45 a watch dog timer timeout 

22. The embedded system of claim 4 further comprising: 
a display device for displaying a shutdown status mes- 
sage. 

23. The embedded system of claim 1 wherein the embed- 
50 ded application uses the storage system for memory 

resources, the embedded application being operable to shut- 
down when the shutdown and reset manager completes the 
orderly shutdown. . 

24. The embedded system of claim 23 wherein the embed - 
55 ded application is stored in memory on a card connected to 

a bus system on the computing system, the card comprising 
an embedded processor for performing the embedded appli- 
cation. 

25. The embedded system of claim 24 wherein the card 
60 comprising the embedded application further includes a 

reset button to generate a second reset signal when a user 
presses the reset button, the second reset signal operable to 
generate a hardware reset, said hardware reset being oper- 
able to re-initialize the embedded system. 
65 26. An improvement to a network access server for 
providing network communications control, the network 
access server comprising: 
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a general purpose computing platform comprising a pro- 
cessor and a storage system, the general purpose com- 
puting platform being operable to execute a plurality of 
general purpose applications stored in the storage 
system, said general purpose applications being oper- 5 
able to provide a user with computing functions during 
execution; 

an operating system executing in the general purpose 
computing platform, the operating system operable to JQ 
provide computing resources to the general-purpose 
applications; 

a telephone line interface and network access application 
comprising at least one telephone line interface con- 
nected to a computer network interface by a high-speed 15 
bus, the telephone line interface and network access 
application operable to perform network access func- 
tions and to create and maintain a plurality of tempo- 
rary data files and to store the plurality of temporary 
data files in the storage system, 

the improvement comprising: 

the telephone line interface and network access appli- 
cation comprising hardware and software compo- 
nents for monitoring at least one shutdown condition ^ 
and a shutdown management driver operable to 
generate at least one reset signal in response to the 
shutdown condition; and 
a shutdown and reset manager in the general purpose 
computing platform, the shutdown and reset man- ^ 
ager operable to receive the reset signal and to 
initiate an orderly shutdown of the operating system 
in response to the reset signal, the storage system 
being operable to store a plurality of temporary data 
files and to close the temporary data files during the ^ 
orderly shutdown of the operating system. 

27. The improvement of claim 26 wherein: 
the telephone line interface and network access applica- 
tion comprises a plurality of cards connected to the 
general purpose computing platform by the high-speed ^ 
bus; and 

wherein each said card includes the hardware and soft- 
ware components for monitoring the at least one shut- 
down condition. 

28. The improvement of claim 27 wherein: 45 
the telephone line interface and network access applica- 
tion further comprises a management card having the 
shutdown and reset management driver, the manage- 
ment card connected to the plurality of cards by the 
high-speed bus to receive the at least one shutdown 50 
condition and to input the at least one shutdown con- 
dition to the shutdown and reset management driver. 

29. The improvement of claim 28 wherein the at least one 
shutdown condition monitored by the hardware and software 
components on the plurality of cards includes ao over 55 
temperature condition on a selected one of the plurality of 
cards. 

30. The improvement of claim 29 wherein the shutdown 
and reset manager is operable to generate a hardware reset 
when the shutdown management driver generates the reset 60 
signal in response to the over temperature condition, said 
hardware reset being operable to re-initialize the network 
access server. 

31. The improvement of claim.28 wherein the at least one 
shutdown condition monitored by the hardware and software 65 
components on the plurality of cards includes an over 
voltage condition on a selected one of the plurality of cards. 



32. The improvement of claim 31 wherein the shutdown 
and reset manager is operable to generate a hardware reset 
when the shutdown management driver generates the reset 
signal in response to the over voltage condition, said hard- 
ware reset being operable to re-initialize the network access 
server. 

33. The improvement of claim 28 wherein the at least one 
shutdown condition monitored by the hardware and software 
components on the plurality of cards includes a loss of 
power good condition on a selected one of the plurality of 

cards. 

34. The improvement of claim 33 wherein the shutdown 
management driver generates a second management reset 
signal when a power good condition is sensed by the 
shutdown management driver. 

35. The improvement of claim 28 wherein the at least one 
shutdown condition monitored by the hardware and software 
components on the plurality of cards includes a system 
lockup condition on a selected one of the plurality of cards. 

36. The improvement of claim 35 wherein the shutdown 
and reset manager is operable to generate a hardware reset 
when the shutdown management driver generates the reset 
signal in response to the system lockup condition, said 
hardware reset being operable to re-initialize the network 
access server. 

37. The improvement of claim 28 wherein the hardware 
and software components includes a watchdog timer and the 
at least one shutdown condition monitored by the watchdog 
timer on the plurality of cards includes a watch dog timer 
timeout. 

38. The improvement of claim 28 further comprising a 
chassis to support the plurality of cards of the telephone line 
interface and network access application wherein the man- 
agement card further comprises hardware and software 
components for monitoring at least one shutdown condition 

for the chassis. 

39. The improvement of claim 38 wherein the at least one 
shutdown condition for the chassis includes an over tem- 
perature condition in the chassis. 

40. The improvement of claim 39 wherein the shutdown 
and reset manager is operable to generate a hardware reset 
when the shutdown management driver generates the reset 
signal in response to the over temperature condition, said 
hardware reset being operable to re-initialize the network 
access server. 

41. The improvement of claim 39 wherein the at least one 
shutdown condition for the chassis includes an over voltage 
condition in the chassis. 

42. The improvement of claim 41 wherein the shutdown 
and reset manager is operable to generate a hardware reset 
when the shutdown management driver generates the reset 
signal in response to the over voltage condition, said hard- 
ware reset being operable to re-initialize the network access 
server. 

43. The improvement of claim 28 wherein the hardware 
and software components includes a chassis watchdog timer 
and the at least one shutdown condition monitored by the 
chassis watchdog timer on the plurality of cards includes a 
watch dog timer timeout. 

44. The improvement of claim 27 further comprising: 
a display device for displaying a shutdown status mes- 
sage. 

45. The improvement of claim 4 wherein the telephone 
line interface and network access application uses the stor- 
age system for memory resources, the telephone line inter- 
face and network access application being operable to 
shutdown when the shutdown and reset manager completes 
the orderly shutdown. 
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46. The improvement of claim 45 wherein the telephone 
line interface and network access application is stored in 
memory on a card connected to the high-speed bus on the 
network access server, the card comprising an embedded 
processor for performing the telephone line interface and 5 
network access application. 

47. The improvement of claim 46 wherein the card 
comprising the telephone line interface and network access 
application further includes a reset button to generate a 
second reset signal when a user presses the reset button, the 10 
second reset signal operable to generate a hardware reset, 
said hardware reset being operable to re-initialize the net- 
work access server 

48. The improvement of claim 27 wherein the operating 
system is the WINDOWS operating system from Microsoft. 15 

49. A method for shutting down an embedded system 
having a general-purpose computing platform, an operating 



181 Bl 

14 

system, a storage system and an embedded application, the 
method comprising the steps of: 

the embedded application opening and maintaining a 
plurality of temporary data files; 

detecting a shutdown condition and generating a reset 
signal in response to the shutdown condition; 

receiving the reset signal at a shutdown and reset manager 
in the general purpose computing platform; 

the shutdown and reset manager initiating an orderly 
shutdown of the operating system in response to the 
reset signal by a method comprising the step of saving 
any open temporary files; and 

completing the shutdown of the operating system after the 
open temporary files have been saved. 



